Analysis
-
max time kernel
29s -
max time network
153s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
12-02-2024 03:41
Static task
static1
Behavioral task
behavioral1
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
-
Size
8.0MB
-
MD5
b6b0dd075860a0f0b4bee87ca74af37e
-
SHA1
ced9354bdefac81abe203556d86323059c40592a
-
SHA256
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6
-
SHA512
7766c9194127565b594f96186cc5b83e2bb03f9945aec95345c8f1790815bb140045e507b473b24471b4dced092d2d5366bdcf0b0fee779c122e5cfdf55b37f1
-
SSDEEP
196608:o+whb1p+1WEvNKE3UG1vCHOYM5s6Gu/f5I2RP:o+wV1p+YEv0E3UsvWjoN3e2x
Malware Config
Signatures
-
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/qemu_pipe com.prowallpapers.picrewaestheticavatar /dev/socket/qemud com.prowallpapers.picrewaestheticavatar -
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5163b0e3f017becbc89b9d7f330b78f09
SHA11ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA5126a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
-
Filesize
512B
MD51d9cdf331ce6913c2767a7f7fa2fd793
SHA1d251fd673fc74797c569f7946dab19fbc7954345
SHA2563fe97e01525aea7ae6d8db2ee4cf82ab2ba95ec186b9ebebc6e36661e054e951
SHA512b723072f40c7005c8bfaedfb2a725831ba50dcb94769e1a2b12743759c234c97d09f9c5c5fb06f432bc6d5168177e1d41d0c08e0bca8b3c34db415d0441c307e
-
Filesize
4KB
MD5ac0636b8607ffce029d7ce269a9daf8c
SHA16380111384f4a1ce1f8d5c6a3355bd4e9ae5387f
SHA256a3d03c35c6707a3f9c4d9626cefd37f116f129f24eb04505243eba6550cf1918
SHA512b1e2092d91324752c48e4ecca1856c4d35b984cdc2bbc41380aafd1538f42c5736a49ef69b6f193312658ada224599f61749a6e0c271fafbe829f3aa6c77e404
-
Filesize
8KB
MD5a4d3df7da548a4da07491468be53418d
SHA15ba6cd768edbda9c30ad3bdfadc8c62f719cc330
SHA2561713d5c294321a0d492b2fcdda6b5a6e4c0acba1d904fb1c6dac918505db21f2
SHA512c4e9ab4a1384e804facd1fad04b1747106b2f3ec4da402203f14b0ab09a87a8cfe3d18fe0eb2563dfca1eb7984292df1aece837eadee0805cb4c1a1aa29cab05
-
Filesize
512B
MD58f7a88119a54dc511c65b1dd74b09087
SHA18c363f6b6b5df9b0b77472a1a96d09fcfe394b5b
SHA256ea01ff290cf39c2fb7c44217babdd902e5a89e07d8069a3bac5d4a38a7f95136
SHA512a480ad4595ea4965244ba75c6cade016e9048f7f5503331ba720136ed389114e4e5ebf2ef50b3a42b3b53b1657e4488e84b7dcada29f1120fd72c5ae4a1a99df
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events
Filesize12KB
MD5ea628e04765adaf4238a5dcdff4bbd51
SHA1a801947619ea8c368efe9c006a324dc6339ac60b
SHA256885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
SHA512c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize8KB
MD5589ddc4d5f554684354228d9bfdcc239
SHA18f1c799e94228c99b9f0eafdb5a81958549994fb
SHA256562e9e50cf28d5676017ae5843e2505e430ed0e30cc44c405179b5d62c962da3
SHA512787c1172b6ee5f98b48cba884c3544cdd2d08e8ae5bd1d1ed9ddf312b6ec4babbbd9197b5846f9d7a9e057124e548528c329595f8c48490893df581226652786
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize512B
MD50ac4f28b1e7180e2691a1b0daa0ec7a3
SHA1c730d284d8dacafce258c8168b0ed1c27733409e
SHA256508278d4742463a2df0d0b73f129d40ea178d01ee7f0309272c0a9b6df909cc4
SHA512294571df9fddbad852c3d6343239dc84e2f318741a8e021974119ba8f3fda2a6a02410aadc6a6055bc5326c35e0317326e656d952d5176ddf2328bc4bedbf1d6
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize8KB
MD58aacde81ce38d9b997ee8c4809810235
SHA158b2416dcff2e9cdddab34961ad7ed84142c58e8
SHA256eb25f081ee1d11e28032e9cda783c61935baa326fe0e9a948dde28965b862e67
SHA512171e3baa53c371aedb719430f3121e40a9f4dd238021cf1c767ab8f9e600a8d857a80d65935cd9487aaeba31a2a165d4f9f7b12436e445c5e689be8bb987afa6
-
Filesize
16KB
MD59da60f77933f5ee0bfd9acf227848817
SHA12eac09a0b2fba857b416e6222496e2d18de8b7ce
SHA25695335d8c802aee8b2822e427e96e515abdb4a642e7d20ea6b63189b20d25f9d2
SHA512c505a77c81d04349ea95e89abdf6296f028dff220a52d8b6362c4b2987e47aa64e4a55a1410bfd6a13da3d19eb6534eb331a9918835b44c1bf3e8df925a4c666
-
Filesize
16KB
MD5ee8c27ac1670b5c381418bf94d6357d6
SHA14a4627f93ec3b96514c5ff4f7ef8c9a3863d58ba
SHA256297d38549d027d821533c596658e972c16249783e244d58e97550dc11c89e1e4
SHA5120ce9714f4c7ffe9676cbce44c1490aee1d22a64c046268048fd043df40c4dbc1b922aed02959ad73b9b36adf6f75b54dae18b0e2818dfb9659460c01ebc1d9db
-
Filesize
16KB
MD52baabe96254da765bdd5ae4d6d80a99c
SHA1035a4de807d65b8c139ebbeab26dd3991472be6c
SHA2564fc73d11c9a44fae2afa30e1a83ff8794cf37a586ca6a32ce9f51f2381b0a70f
SHA512d5e67f9e16e8cd9ffd8e0ef77b51dff29a714e65b12473cb17d1486528fd0efe78cde0d5bd032dc6866dd37dec9095fa717c2bffeebabbbeed88ed1305e16876
-
Filesize
16KB
MD59bec2f2ba00eb4c14b0d88f4baee31c6
SHA14c23d1d5a4071d881df03a32a93b37e48dbd4fac
SHA2561654f353aff72a36010a50dd244aa985a473dacb187e484e2520e43ed96c5d17
SHA5129acda7b03aacc438ce608a8ac9943111778ec1cad20952f396b0f9ad1d3689a19a57d08a6244a74455b4cade1a36a1d6ba858db2524ddbf30ac0e79c0313011a
-
Filesize
16KB
MD581f0bdd39b514be1c7b64d2c025494c3
SHA152b0e15dcd0c96c5662b2aa222615c6a5af4ca3a
SHA256d8ee6f7ccbe82fbdfc46a5624a0b79646a2a77a6eb78c5f6b88046268c7b8314
SHA512470bc599ed101d406ac11fc3f01627917b8a5032a02de7d347145befb5e1f8f083f2887e486a9684ebb8b5c115eeeba6751afc749ed8381168f24bf9f94fdc51
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/google_app_measurement_local.db-journal
Filesize8KB
MD56511f9fb40d7647d4421bf15bc783e14
SHA10fa3f64c7920138fe1940972983cda37a9dea904
SHA256c18b25d9f483cdeff5a956d87507dc3c35377ced11bd40604a5d26cc8de6fbd6
SHA512a67baee5c4139b28e272862d6c94bc428768f24d5347120c25abd0bf9102c4b01fc19e50ea776ab71a48569df1b007b49420eba0f1845b64c38ae55f8dbd345a
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/.com.google.firebase.crashlytics.files.v2:com.prowallpapers.picrewaestheticavatar/open-sessions/65C9A0CB033D000113C2C0BBF25B9476/report
Filesize809B
MD58768bec4fb04cf2d27527f67e973d537
SHA1ad1cab30deaf9b12accb0aefce1a55be9ef1a79b
SHA25630a769fab7eb7cc39dffb98148eb0f83bb763938cf63198f4a077bd55485c02f
SHA51220829d5cb1d771a0af8941c9cd81ae53fb2e8f077ee32408d537707400b6ee77fb70df86d1cea26f4487c283091a72f2287802f385fdf8d5ef27b7b82a3e15e1
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/.com.google.firebase.crashlytics.files.v2:com.prowallpapers.picrewaestheticavatar/open-sessions/65C9A0CB033D000113C2C0BBF25B9476/userlog
Filesize88B
MD5b4fb859600d7f7baf84835b1a33d9213
SHA131f7effd17035d78719c561de1df244b3189cce9
SHA25676edf9a546e2f9afcd6915013bb80c69e23bdd7d97938d813ef3d693a55921f8
SHA512468fe949d03b37dad1ecadcef58a3b9adb4765dc3b0e5bbde3a81d188b02f16f9a21afd08905a2cf8f212a2dc2a19435bc014c70b6939dc2256c24f46aa50749
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/.com.google.firebase.crashlytics.files.v2:com.prowallpapers.picrewaestheticavatar/open-sessions/65C9A0CB033D000113C2C0BBF25B9476/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/PersistedInstallation6098197319295912426tmp
Filesize90B
MD57b0102cd71088140e01be9abfc0764e5
SHA1fec0fdcee2961555a6f4cda93106df4648aff3c2
SHA2564c580fc50094ee88e1c4c9dc019c00defbdec5d7088045486e4f957ba5eff306
SHA51217793e886a372b3632950f836e321d6deb6f303268ee2008f670dd12b472a0133f2cfab36dcd88e5b5bd0139b6f68bdd8f86ada953cc9b1956c09a34b90b4f8e
-
Filesize
24B
MD5a2b96c199cbae3c2037d3d21511c26ca
SHA12f7a68ea198011d3944d24c1d7973bf26e1787a1
SHA256462db50c6f03054d7d8e2f59b95aa455a2235e0da56cd98db81f7b0bcf2cac75
SHA5121e5d6ea565be9e8b2a4ae7236a14f358fe0f9d37915fa83c1aad4d110a400c1ac9daab4b0c866bf41473b115e0c67efc4026c16c673288c5487633d1f0e5e7ac
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Filesize8B
MD57d1d7b97e50514a197d036a2fc028610
SHA14df8dd48dcc007b652e4d71cce1e5aade75e1ee0
SHA256145503a9580fb4f63259750f8c76084e9c7cd62e29e52e7d603a7a03b16854c8
SHA5128e20cbaac841bcb4fd045789353c0f13a383322aee02e29432881cecafcfd1471369374da5ff5f6acff1c5b0472215131c609e53d2951680494cdc987b4f35a9
-
Filesize
5B
MD59dcf2a6f12095ecff342e9fa0c5ca72f
SHA1c815f34691be353caa9de93bbdb00a31f62a9ed3
SHA2564e68143408826326220a32d6bff59e1cca3dd85f74b018aebd6723c5686c54e5
SHA5127ba3449f5ec3363bbee33d47abe471286cf78034dd70379fa4d0de5fd59215e8c58287eddffed1b9c3c74e157f6a9ad69b0c551001a62d04790bba49df48231c
-
Filesize
8KB
MD5da039052a52acee010ea8ef924b88780
SHA1c0448b0170d5713e200bf0406be2e7e321d57447
SHA2564f8119fc30851722d93756d8830db46248bc73bc79e35fe644fe7956a0f54bed
SHA512fe3c0aec823be850653113581b8db6e72ee6676be8f1b2c3c8baf4a76ff8c243ede96de6d015d31b4b63cf269463fe95b25a9fce454c845b7b97d1f8a99bceb1